CVE-2022-41830
Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script.
Does this matter?
Lower severity and a low EPSS score (0.82%). Track it; it rarely justifies an emergency change on its own.
Description
Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.
- CVSS 3.1
- 4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.82% probability · 55th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- kyocera/taskalfa 7550ci firmware · kyocera/taskalfa 6550ci firmware · kyocera/taskalfa 5550ci firmware · kyocera/taskalfa 4550ci firmware · kyocera/taskalfa 3550ci firmware · kyocera/taskalfa 3050ci firmware · kyocera/taskalfa 255c firmware · kyocera/taskalfa 205c firmware · kyocera/taskalfa 256ci firmware · kyocera/taskalfa 206ci firmware · kyocera/ecosys m6526cdn firmware · kyocera/ecosys m6526cidn firmware · kyocera/fs-c2126mfp firmware · kyocera/fs-c2126mfp\+ firmware · kyocera/fs-c2026mfp firmware · kyocera/taskalfa 8000i firmware · kyocera/taskalfa 6500i firmware · kyocera/taskalfa 5500i firmware · kyocera/taskalfa 4500i firmware · kyocera/taskalfa 3500i firmware · +20 more
- Source
- vultures@jpcert.or.jp
References
- https://jvn.jp/en/jp/JVN46345126/index.htmlVendor Advisory
- https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.htmlMitigation, Vendor Advisory
- https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.htmlThird Party Advisory
- https://jvn.jp/en/jp/JVN46345126/index.htmlVendor Advisory
- https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.htmlMitigation, Vendor Advisory
- https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.